Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft
File:                     SPodPo-G37CPuXQySFIkJqHK0TM.mft (raw, json)
Hash identifier:          upGhyytfS8UaeZ7gJpJUCicTDdJnMdxvTnvGW/AGW3A=
Subject key identifier:   8F:91:6F:50:29:5E:EE:5F:2E:D2:43:5B:34:48:41:98:BB:13:5C:65
Authority key identifier: 48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33
Certificate issuer:       /CN=A91EB095/serialNumber=48FA1D3E8F86DFB08FB9743248522426A1CAD133
Certificate serial:       0D8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft
Manifest number:          0D82
Signing time:             Fri 31 Jan 2025 17:56:26 +0000
Manifest this update:     Fri 31 Jan 2025 17:56:25 +0000
Manifest next update:     Fri 07 Feb 2025 17:56:25 +0000
Files and hashes:         1: SPodPo-G37CPuXQySFIkJqHK0TM.crl (hash: moS6uHUMFD4D1GEYWqv5c1fpffFGojVR9t2/s5l5/zw=)
                          2: B75F392ABBAC11E9A8355F6DC4F9AE02.roa (hash: nQHZt5It8SSChaUZjXVPwYBj8P2XFpk/UxoBS65SjME=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3468 (0xd8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB095/serialNumber=48FA1D3E8F86DFB08FB9743248522426A1CAD133
        Validity
            Not Before: Jan 31 17:56:25 2025 GMT
            Not After : Feb  7 17:56:25 2025 GMT
        Subject: CN=679d0eca-8cd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4a:11:4a:a4:db:8f:79:20:42:1d:07:3c:77:
                    e0:7d:96:db:b9:eb:89:8f:89:8f:db:bb:e1:4c:18:
                    83:24:7a:ca:ab:6f:e5:09:ea:d6:8e:60:18:2b:e4:
                    9a:d0:36:6f:48:df:a0:d9:64:c6:1f:11:3c:50:10:
                    dd:d3:9b:1c:24:35:9d:9e:b8:a3:93:61:92:0e:ba:
                    06:85:f5:01:c1:1a:3b:ff:88:38:4f:f4:bb:ed:20:
                    ba:0f:ed:13:07:02:3c:a3:5d:7e:28:68:76:5a:17:
                    b8:09:06:2a:a1:41:1d:f2:c7:7e:41:23:d2:d0:5f:
                    5f:06:ab:56:9b:85:20:02:0f:a5:37:21:8b:d5:16:
                    52:3b:d4:06:25:c4:0e:91:af:db:cc:71:0f:8a:0f:
                    c0:ca:cb:30:d6:10:41:65:81:6c:0f:0f:3a:cf:09:
                    5b:35:1d:e3:06:ed:bf:2b:09:bb:35:87:bf:4b:eb:
                    ba:e8:51:ba:78:0e:0e:ef:e4:43:09:df:bc:63:84:
                    42:6c:5b:cd:42:0e:56:ba:d8:4e:48:31:24:9a:c2:
                    68:94:dc:5a:74:4f:5b:ec:1e:27:44:9e:79:0f:74:
                    d0:01:e6:fc:67:18:32:57:ba:fd:41:b4:59:a5:fe:
                    1d:0d:c4:59:8d:25:ac:46:b3:bf:9f:ff:12:ba:a2:
                    ef:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:91:6F:50:29:5E:EE:5F:2E:D2:43:5B:34:48:41:98:BB:13:5C:65
            X509v3 Authority Key Identifier:
                keyid:48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ca:89:da:e2:28:1a:f7:21:c7:ae:72:b4:c8:10:b7:27:6e:
         3c:d1:e5:77:3c:82:52:0c:ba:66:57:b7:ef:94:3a:3c:b8:1e:
         42:3a:07:98:8a:e9:9e:d4:2b:6f:31:87:51:8b:22:d6:70:03:
         bf:e2:b5:61:ab:ec:35:4d:6e:a3:09:52:72:21:76:2e:e2:6e:
         28:a6:1b:55:1b:b9:fc:d1:b7:6f:f8:35:33:9d:fe:e8:89:14:
         2e:70:c1:6c:c6:2d:95:0c:c8:1a:6f:08:09:bb:18:b4:46:9d:
         54:d4:19:72:23:08:89:db:59:59:4e:c3:6e:96:55:2d:46:71:
         ac:94:1a:8c:80:31:66:5f:ac:d4:58:3b:e3:4f:f7:8b:43:f1:
         83:d5:05:d6:b5:78:df:fd:ad:a0:d2:a2:b7:61:3f:74:9b:e3:
         e5:7d:dc:50:93:b6:dc:7d:2d:a0:4e:f6:78:9b:88:d0:39:a4:
         1f:1f:e2:e5:93:8c:a5:78:84:d3:e2:df:36:b2:e4:37:66:24:
         10:bb:53:84:97:39:92:3b:58:3c:af:0f:13:9f:00:ec:89:40:
         53:18:2a:da:24:92:a2:3e:b1:e4:04:34:96:ad:be:22:b3:89:
         a0:8e:e5:d0:0a:af:21:35:91:71:2e:5a:85:e1:84:43:42:e2:
         7b:f4:74:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:03 2025 by rpki-client